Free Malware Removal Forum

Welcome to MalwareRemoval.com,What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

This forum sorted the last malware problem I had (spyfalcon) out in no time at all about a year ago, so I'm back with a new but smaller problem!

Right, when I go into webpages the page loads normally and then after the page has loaded random words become hyperlinked on the page. When you click them it takes a few seconds and then a random page comes up with links to shopping type websites and stuff. Also, every now and then a new window pops up which is blank to begin with titled 'about:blank'. When it loads again a random kind of links page comes up.

I have ran ewido, spybot, and adaware personal but to no avail. I also ran a Smitrem programme I got off this site last time I had a problem but that hasn't sorted it either.

One or more of the identified infections is a backdoor trojan. This LINK

This allows hackers to remotely control your computer, steal critical system information and Download and Execute files

I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Though the Trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:

It's free. And it's not a resource hog. I don't feel it appropriate to recommend any "paid for" versions of AV's. That would be up to you to decide.

Keep your Java up to date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version Java components and update.

Updating Java:

Download the latest version ofJava Runtime Environment (JRE) 5.0 Update 9.Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".Click the "Download" button to the right.Check the box that says: "Accept License Agreement".The page will refresh.Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.Close any programs you may have running - especially your web browser.Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.Check any item with Java Runtime Environment (JRE or J2SE) in the name.Click the Remove or Change/Remove button.Repeat as many times as necessary to remove each Java versions.Reboot your computer once all Java components are removed.Then from your desktop double-click on jre-1_5_0_09-windowsi586-p.exe to install the newest version.

Make your Internet Explorer more secureThis can be done by following these simple instructions:

Open Internet Explorer click Tools->> Options.Click Security tabClick once on the Internet icon so it becomes highlighted.Click Custom Level.Change the Download signed ActiveX controls to Prompt Change the Download unsigned ActiveX controls to Disable Change the Initialise and script ActiveX controls not marked as safe to DisableChange the Installation of desktop items to Prompt Change the Launching programs and files in an IFRAME to PromptChange the Navigate sub-frames across different domains to Prompt When all these settings have been made, click OK.If it prompts you to save the settings, press Yes.Next press Apply and then OK to exit the Internet Properties page

Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.

Who is online

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.